Networking
7 guides · all topics
pfSense Hardware Guide: What to Actually Buy
The most important pfSense spec isn't the CPU, it's the NIC. Plus why vendor throughput numbers overstate by 4x and AES-NI won't help your WireGuard.
Tailscale vs. WireGuard on pfSense: Which Should You Run?
Tailscale is WireGuard with a control plane on top. On pfSense there's a catch: FreeBSD can't run kernel mode, and it changes how packets are routed.
Host Your Own Email: Why It's Not as Hard (or Dangerous) as You've Heard
Self-hosted email, ten years in — the one real hurdle (port 25), the myths that aren't true, and the complete relay setup, hardened.
DNS over TLS on pfSense: Encrypt Unbound's Upstream Queries
Encrypt pfSense's DNS queries with DoT — setup, the DNSSEC tradeoff, and how to actually verify it's working, not just enabled.
Multi-Site VPN on pfSense: Connect Multiple Locations with WireGuard (No Vendor Fees)
A real multi-site WireGuard VPN on pfSense — hub-and-spoke, dual-stack, no NAT, and only the hub needs a static IP.
pfSense WireGuard IPv6 Setup: Full Tunnel and Split Tunnel Guide
A complete dual-stack WireGuard VPN on pfSense — IPv6 included, both tunnel modes covered, and the firewall rules most guides leave out.
IPv6 Subnetting Explained: Full CIDR Prefix & Usable Range Reference
If you learned IPv6 subnetting by carrying over IPv4 habits, a few things break immediately. There’s no broadcast address, no “network address” burned out of every subnet, and the …